i have Dc 2008 R2 and i have Vpn Connection with more than branches in the same domain , i decided 2 change the domain administrator password the password changed but the old one is still work in other branch what is the problem ??

Your two AD does not sync, or you are in the "in between" sync period. (Or the machine use local cached credential when they logon locally, thus a network problem again.) MCP | MCTS 70-236: Exchange Server 2007, Configuring Want to follow me ? | Blog: http://www.jabea.net | http://blogs.technet.com/b/wikininjas/

Your two AD does not sync, or you are in the "in between" sync period. (Or the machine use local cached credential when they logon locally, thus a network problem again.) MCP | MCTS 70-236: Exchange Server 2007, Configuring Want to follow me ? | Blog: http://www.jabea.net | http://blogs.technet.com/b/wikininjas/

Hello, are firewall ports open according to http://technet.microsoft.com/en-us/library/dd772723(WS.10).aspx Please upload the following files, so we can verify: ipconfig /all >c:\ipconfig.txt [all DCs] dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)] dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045) ADREPLSTATUS: http://www.microsoft.com/en-us/download/details.aspx?id=30005 can also be exported to file. As the output will become large, DON'T post them into the thread, please use Windows Sky Drive(with open access!) http://explore.live.com/windows-live-skydrive and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hello, are firewall ports open according to http://technet.microsoft.com/en-us/library/dd772723(WS.10).aspx Please upload the following files, so we can verify: ipconfig /all >c:\ipconfig.txt [all DCs] dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)] dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045) ADREPLSTATUS: http://www.microsoft.com/en-us/download/details.aspx?id=30005 can also be exported to file. As the output will become large, DON'T post them into the thread, please use Windows Sky Drive(with open access!) http://explore.live.com/windows-live-skydrive and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

You may try forcing the replication Go to Start > Programs > Administrative Tools > and open the Active Directory Sites and Services MMC. 2. Expand the Sites container in the left pane by clicking the plus (+) to the left of it. 3. Expand the container that represents the name of the site containing the server that needs to be synchronized. 4. Expand the Servers container and then expand the target server to display the NTDS settings object. 5. Click the NTDS Settings option. In the right pane should now be a list of the target servers replication partners. 6. Right click a connection object in the right pane and click Replicate Now http://www.arabitpro.com

You may try forcing the replication Go to Start > Programs > Administrative Tools > and open the Active Directory Sites and Services MMC. 2. Expand the Sites container in the left pane by clicking the plus (+) to the left of it. 3. Expand the container that represents the name of the site containing the server that needs to be synchronized. 4. Expand the Servers container and then expand the target server to display the NTDS settings object. 5. Click the NTDS Settings option. In the right pane should now be a list of the target servers replication partners. 6. Right click a connection object in the right pane and click Replicate Now http://www.arabitpro.com

Hi, Please ensure that the new password has been replicated successfully. We could use the repadmin /showrepl command or Active Directory Replication Status Tool to verify successful replication to a specific domain controller. If it didnt replicate successfully, we could force replicate it with the following method. To force replication over a connection Open Active Directory Sites and Services: On the Start menu, point to Administrative Tools, and then click Active Directory Sites and Services.In the console tree, expand Sites, and then expand the site to which you want to force replication from the updated server.Expand the Servers container to display the list of servers that are currently configured for that site.Expand the server objects and click their NTDS Settings objects to display their connection objects in the details pane. Find a server that has a connection object from the server on which you made the updates.Click NTDS Settings below the server object. In the details pane, right-click the connection object whose From Server is the domain controller that has the updates that you want to replicate, and then click Replicate Now.When the Replicate Now message box appears, review the information, and then click OK. Once we make a force replication, please check if the issue can be resolved. For details, please refer to the following articles. Verify successful replication to a domain controller http://technet.microsoft.com/en-us/library/cc736355(v=ws.10).aspx Active Directory Replication Status Tool http://blogs.technet.com/b/fmustafa/archive/2012/06/12/active-directory-replication-status-tool.aspx Force Replication Between Domain Controllers http://technet.microsoft.com/en-us/library/cc816926(v=ws.10).aspx Troubleshooting replication http://technet.microsoft.com/en-us/library/cc755349(v=ws.10).aspx Regards, Andy

Hi, Please ensure that the new password has been replicated successfully. We could use the repadmin /showrepl command or Active Directory Replication Status Tool to verify successful replication to a specific domain controller. If it didnt replicate successfully, we could force replicate it with the following method. To force replication over a connection Open Active Directory Sites and Services: On the Start menu, point to Administrative Tools, and then click Active Directory Sites and Services.In the console tree, expand Sites, and then expand the site to which you want to force replication from the updated server.Expand the Servers container to display the list of servers that are currently configured for that site.Expand the server objects and click their NTDS Settings objects to display their connection objects in the details pane. Find a server that has a connection object from the server on which you made the updates.Click NTDS Settings below the server object. In the details pane, right-click the connection object whose From Server is the domain controller that has the updates that you want to replicate, and then click Replicate Now.When the Replicate Now message box appears, review the information, and then click OK. Once we make a force replication, please check if the issue can be resolved. For details, please refer to the following articles. Verify successful replication to a domain controller http://technet.microsoft.com/en-us/library/cc736355(v=ws.10).aspx Active Directory Replication Status Tool http://blogs.technet.com/b/fmustafa/archive/2012/06/12/active-directory-replication-status-tool.aspx Force Replication Between Domain Controllers http://technet.microsoft.com/en-us/library/cc816926(v=ws.10).aspx Troubleshooting replication http://technet.microsoft.com/en-us/library/cc755349(v=ws.10).aspx Regards, Andy

Hi, Please ensure that the new password has been replicated successfully. We could use the repadmin /showrepl command or Active Directory Replication Status Tool to verify successful replication to a specific domain controller. If it didnt replicate successfully, we could force replicate it with the following method. To force replication over a connection Open Active Directory Sites and Services: On the Start menu, point to Administrative Tools, and then click Active Directory Sites and Services.In the console tree, expand Sites, and then expand the site to which you want to force replication from the updated server.Expand the Servers container to display the list of servers that are currently configured for that site.Expand the server objects and click their NTDS Settings objects to display their connection objects in the details pane. Find a server that has a connection object from the server on which you made the updates.Click NTDS Settings below the server object. In the details pane, right-click the connection object whose From Server is the domain controller that has the updates that you want to replicate, and then click Replicate Now.When the Replicate Now message box appears, review the information, and then click OK. Once we make a force replication, please check if the issue can be resolved. For details, please refer to the following articles. Verify successful replication to a domain controller http://technet.microsoft.com/en-us/library/cc736355(v=ws.10).aspx Active Directory Replication Status Tool http://blogs.technet.com/b/fmustafa/archive/2012/06/12/active-directory-replication-status-tool.aspx Force Replication Between Domain Controllers http://technet.microsoft.com/en-us/library/cc816926(v=ws.10).aspx Troubleshooting replication http://technet.microsoft.com/en-us/library/cc755349(v=ws.10).aspx Regards, Andy